OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Double Auth

From: Angel Villegas (angel.villegasciti.com.mx)
Date: Tue Nov 01 2005 - 18:35:54 CST


Hi, I have configurate the postfix to auth with a mysql, All work very
fine but the log give me an error, I think that is a double
authentication the first fail and the second is sucessful Somebody have
an idea that waht can be the problem.

= Messages log=

First

Oct 22 16:23:33 post_ale saslauthd[23448]: null login/password received
Oct 22 16:23:33 post_ale saslauthd[23448]: AUTHFAIL:
user=user1domain.com service=smtp realm= [Null login/password (saslauthd)]
Oct 22 16:23:33 post_ale saslauthd[23444]: AUTHFAIL:
user=user1domain.com service=smtp realm= [PAM auth error]
Oct 22 16:23:35 post_ale saslauthd[23445]: AUTHFAIL:
user=user1domain.com service=smtp realm= [PAM auth error]

Second

Oct 22 16:23:45 post_ale saslauthd[23445]: pam_sm_authenticate called.
Oct 22 16:23:45 post_ale saslauthd[23445]: dbuser changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: dbpasswd changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: host changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: database changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: table changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: usercolumn changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: passwdcolumn changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: crypt changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: logtable changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: logmsgcolumn changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: logusercolumn changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: loghostcolumn changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: logpidcolumn changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: logtimecolumn changed.
Oct 22 16:23:45 post_ale saslauthd[23445]: db_connect called.
Oct 22 16:23:45 post_ale saslauthd[23445]: returning 0 .
Oct 22 16:23:45 post_ale saslauthd[23445]: db_checkpasswd called.
Oct 22 16:23:45 post_ale saslauthd[23445]: pam_mysql: where clause =
Oct 22 16:23:45 post_ale saslauthd[23445]: SELECT clear FROM passwd
WHERE id='user1domain.com'
Oct 22 16:23:45 post_ale saslauthd[23445]: sqlLog called.
Oct 22 16:23:45 post_ale saslauthd[23445]: insert into log (msg, user,
host, pid, time) values('AUTH SUCCESSFUL', 'user1domain.com', '',
'23445', NOW())
Oct 22 16:23:45 post_ale saslauthd[23445]: Returning 0
Oct 22 16:23:45 post_ale saslauthd[23445]: returning 0 .
Oct 22 16:23:45 post_ale saslauthd[23445]: returning 0.
Oct 22 16:23:45 post_ale saslauthd[23445]: pam_mysql: acct_mgmt called
but not implemented. Dont panic though :)

--
----------------------
Angel Villegas